$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json) Hash identifier: haCgRs+pa1jKhxOIF/uuRVoZn3SeDJFNt151NF3yWdA= Subject key identifier: A3:24:86:6A:2D:03:1E:2B:18:2A:A0:67:54:7D:5C:67:42:AE:AA:96 Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Certificate serial: 0463 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft Manifest number: 045C Signing time: Sat 28 Jun 2025 23:46:47 +0000 Manifest this update: Sat 28 Jun 2025 23:46:46 +0000 Manifest next update: Sat 05 Jul 2025 23:46:46 +0000 Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: Hu3SwoPD2w/6a2bwBzijnW/LbFan+6eFLObQgdb7UvE=) 2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: R82yDGIsGFvNSThNuNqqir6NPI8oiHV+tooLUAlLp1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1123 (0x463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Validity Not Before: Jun 28 23:46:46 2025 GMT Not After : Jul 5 23:46:46 2025 GMT Subject: CN=68607ee7-a25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:90:57:7d:6b:d2:b0:04:56:79:ca:cb:23:22: c6:82:93:a2:a2:01:fd:c6:9a:95:a6:11:6a:e6:da: c3:9d:b8:96:22:e9:76:a2:70:80:89:86:ac:5b:2e: 97:3c:53:74:8f:7a:b5:dc:14:74:ac:9f:44:68:e9: 82:e9:51:f2:4a:1f:06:27:63:00:52:a0:52:3c:4d: 22:99:50:ee:83:4f:32:69:b6:b9:c8:41:18:bd:3e: 12:f2:30:14:c8:73:c4:4a:ea:af:ad:c5:ff:91:d1: d6:f8:3d:3e:f0:d0:ac:d7:2f:ba:63:40:95:fd:e3: ae:93:6b:c5:a2:78:23:27:fb:af:8a:a6:33:f7:12: 0b:04:72:45:f2:ab:c4:e1:e1:76:be:22:ae:e2:ae: 07:fd:35:e4:0f:7d:59:d2:02:22:9f:2f:0d:67:01: e9:9f:96:81:12:54:94:93:ce:2b:ba:7d:88:3c:67: 34:3d:49:65:99:e2:21:cd:68:9f:4b:85:4d:65:c8: 7a:3f:76:24:0d:af:76:e8:b4:4e:33:9f:5b:28:67: 36:48:56:ea:b1:1b:f1:d6:ee:84:46:a2:00:e7:e3: 0e:7e:df:02:e8:ea:1a:0c:98:00:3f:2e:4d:71:e8: 7c:c8:13:0e:3b:2c:4a:77:ec:a0:c0:7c:ab:57:7a: 0e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:24:86:6A:2D:03:1E:2B:18:2A:A0:67:54:7D:5C:67:42:AE:AA:96 X509v3 Authority Key Identifier: keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:cf:33:ea:14:f2:e2:c3:98:33:10:63:68:d3:13:6a:c4:d1: fe:4b:83:22:43:7d:f0:f9:7e:22:68:a3:46:07:db:f6:a6:58: 2a:de:32:a4:7f:63:d2:da:60:9b:34:37:7e:22:d4:e6:77:35: 37:ce:80:80:2b:48:6c:6c:0b:bf:51:bd:dc:c2:de:12:46:58: 8c:61:e0:5d:26:9f:3e:c6:1c:5a:9e:6e:01:43:81:61:d7:af: c6:d5:77:e3:5f:2a:89:40:de:08:ec:9b:bd:1f:1b:fd:ce:a6: 92:26:33:45:a0:d6:69:81:45:43:2a:5c:3e:13:e9:ce:1b:60: a1:5c:07:94:de:34:ad:d3:c6:99:31:e9:eb:51:3b:d8:0f:c8: d9:08:46:9b:08:d4:69:1e:80:06:8d:0f:06:20:30:2f:bf:c0: bc:b9:a4:84:1a:ca:a3:10:48:1c:81:c1:45:9f:b1:f9:25:26: 0f:48:34:58:38:90:22:f2:10:68:65:6f:cb:87:53:ad:1d:9e: c6:b2:fb:c9:12:e0:c7:55:56:2e:d5:e2:f4:77:9c:55:81:c9: 63:f2:04:86:ba:e0:79:55:5b:01:59:f0:1b:5d:c8:3f:8a:46: 60:71:4d:44:69:c8:5e:3c:2b:7e:7a:d2:06:cb:1b:52:e7:ac: 22:38:5a:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw OTYzNTNERDgwHhcNMjUwNjI4MjM0NjQ2WhcNMjUwNzA1MjM0NjQ2WjAYMRYwFAYD VQQDEw02ODYwN2VlNy1hMjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4JBXfWvSsARWecrLIyLGgpOiogH9xpqVphFq5trDnbiWIul2onCAiYasWy6X PFN0j3q13BR0rJ9EaOmC6VHySh8GJ2MAUqBSPE0imVDug08yaba5yEEYvT4S8jAU yHPESuqvrcX/kdHW+D0+8NCs1y+6Y0CV/eOuk2vFongjJ/uviqYz9xILBHJF8qvE 4eF2viKu4q4H/TXkD31Z0gIiny8NZwHpn5aBElSUk84run2IPGc0PUllmeIhzWif S4VNZch6P3YkDa926LROM59bKGc2SFbqsRvx1u6ERqIA5+MOft8C6OoaDJgAPy5N ceh8yBMOOyxKd+ygwHyrV3oO6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMkhmot Ax4rGCqgZ1R9XGdCrqqWMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3 ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2 R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFzzPqFPLiw5gzEGNo0xNqxNH+S4MiQ33w+X4iaKNGB9v2plgq3jKk f2PS2mCbNDd+ItTmdzU3zoCAK0hsbAu/Ub3cwt4SRliMYeBdJp8+xhxanm4BQ4Fh 16/G1XfjXyqJQN4I7Ju9Hxv9zqaSJjNFoNZpgUVDKlw+E+nOG2ChXAeU3jSt08aZ MenrUTvYD8jZCEabCNRpHoAGjQ8GIDAvv8C8uaSEGsqjEEgcgcFFn7H5JSYPSDRY OJAi8hBoZW/Lh1OtHZ7GsvvJEuDHVVYu1eL0d5xVgclj8gSGuuB5VVsBWfAbXcg/ ikZgcU1EachePCt+etIGyxtS56wiOFpC -----END CERTIFICATE-----Generated at Mon Jun 30 00:14:24 2025 by rpki-client